[Feature request] Display repository GPG key (signed-by) in Software Sources
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
Research direction
Start by locating the Software Sources tool's repository and authentication-key UI, then trace how enabled APT repositories are read. Define how signed-by= paths, optional fingerprints, key locations, and present/missing status should appear in an Advanced or Details view. Done means each enabled repository exposes this information read-only without making the main UI less approachable.
Written by the indexing model from the issue text.
Description
Since APT now recommends per-repository GPG keys using the signed-by= directive (stored in /usr/share/keyrings/), the Software Sources tool no longer shows any authentication keys, even though they are correctly configured and used by APT.
This can be confusing for users, especially those who added third-party repositories manually and want to audit or verify their system configuration.
Suggested improvement
For each enabled repository, display (read-only):
- GPG key file used (signed-by=…)
- Key fingerprint (optional)
- Key location (/usr/share/keyrings/…)
- Status (key present / missing)
This information could be shown in an “Advanced” or “Details” view to keep the UI simple for non-technical users.
Benefits
- Improves transparency and trust in third-party repositories
- Aligns the GUI with modern APT security practices
- Helps users audit and reproduce clean system installations
- Reduces confusion caused by the now-empty “Authentication keys” section
Cheers
- Dominant language
- Python
- Stars
- 59
- Forks
- 80
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from linuxmint/mintsources
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
linuxmint/mintsources#215 · 2 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 58/100
linuxmint/mintsources#281 ·
-
manually added sources without the enabled flag show up as unchecked in "additional repositories" Open
Difficulty 3/5 1-2 days Newbie friendliness 55/100
linuxmint/mintsources#280 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 52/100
linuxmint/mintsources#278 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
linuxmint/mintsources#274 ·
All issues in linuxmint/mintsources
Similar issues
-
essnmx good first issue
Difficulty 1/5 Under an hour Newbie friendliness 95/100
-
[Feature] 奇物选择添加优先级 Open
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
syfoud/Simulated_Scepter#174 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Giskard-AI/giskard-oss#2840 · 1 comment ·
-
A claim comment carrying the issue number is silently declined while the workflow reports success Openarea: repo bug perceived difficulty: 2
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
yeti-platform/yeti#1380 ·